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Amendments to the Claims 

This hsting of claims will replace all prior versions, and Hstings, of claims in 
the application: 
Listing of Claims : 

1-2. (Canceled) 

3. (Previously presented) A cryptographic communications method for 
communications of information between entities wherein a plurality of centers are 
provided, each of which generates secret keys peculiar to the entities using divided 
pieces of information resulting from division of information specifying each of the 
entities, the divided information used to generate the secret keys allowing 
diminished sizes of the secret keys; one entity generates a first common key using a 
first component contained in at least one secret key generated by at least one of the 
plurality of centers, the secret key being peculiar to the one entity, encrypts 
plaintext to ciphertext using the first common key and sends the ciphertext to 
another entity, the first component corresponding to one or more of the divided 
pieces of information specifying said another entity; and said another entity 
generates a second common key identical to the first common key using a second 
component contained in secret keys peculiar to the another entity sent from said 
centers, and decrypts said ciphertext to the original plaintext using the second 
common key, the second component corresponding to one or more of the divided 
pieces of information specifying the one entity. 

4. (Previously presented) A cryptographic communications method for 
communicating information between entities wherein: 

secret keys peculiar to said entities are sent from a center to said entities; 

one entity encrypts plaintext to ciphertext using a first common key derived 
from a first secret key peculiar to the one entity sent from said center and sends the 
ciphertext to another entity; 
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said another entity decrypts said ciphertext to the original plaintext using a 
second common key identical to the first common key, the second common key being 
derived fi-om a second secret key peculiar to said another entity sent fi:om said 
center^ characterized in that; 

a plurality of said centers are deployed; 

each of said plurality of centers generates secret keys peculiar to said entities 
by adding random numbers peculiar to said entities to divided pieces of information 
resulting from division of information specifying each of said entities, the divided 
information used to generate the secret keys allowing diminished sizes of the secret 
keys; and 

each of said entities generates a common key using a component, contained 
in the secret key peculiar to that selfsame entity, corresponding to one or more of 
the divided pieces of information obtained from each of said pluraUty of centers 
which specify an opposite entity. 

5. (Original) The cryptographic communications method according to claim 4, 
wherein computation formulas for generating secret keys at said centers are as 
follows: 

Si J sctiaHg CI jj] (m o d P - 1 ) 

I 
I 

i . 
I ' 

's7ir=«iKHK 11\k1 (mod P-1) 
where 

vector Sij is a secret key corresponding to j'th piece of divided information 
specifying entity i (j = 1, 2, K) 

[vector lij] is j'th piece of divided information specifying entity i; 
P is a prime number; 

K is number of divisions in the information specifying entity i; 
g is primitive element for GF (P); 
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Hj is a symmetrical 2^ x 2^ matrix made up of random numbers; 

M is size of divisions in the information specifying entity i; and 

Oij is a personal secret random number for entity i (where an ... oik = 1 (mod P- 

D). 

6. (Original) The cryptographic communications method according to claim 5, 
wherein computation formulas for generating common keys at said entities are as 
follows: 

= g vmoaP) 
where 

Kim is common key generated by one entity i for another entity m; and 
vector Sij [vector lij] is a component contained in secret key vector sy of entity 
i, corresponding to divided piece of information specifying entity m. 

7. (Previously presented) A common key generator provided at entities in a 
cryptographic communications system for generating common keys to be used in 
processing to encrypt plaintext into ciphertext and in processing to decrypt 
ciphertext into plaintext, comprising: 

storage means at each entity for storing secret keys peculiar to each 
respective entity produced for respective pieces of information resulting from 
division of information specifying each of said respective entities, the divided 
information used to generate the secret keys allowing diminished sizes of the secret 
keys; 

selection means for selecting components corresponding to pieces of 
information specifying opposite entities to be communicated with, from among the 
secret keys stored; and 

means for generating said common keys using said components so selected. 
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8. (Previously presented) A cr5T?tographic communications system for 
reciprocally performing, between a plurality of entities, encrypting processing for 
encr5T)ting plaintext that is information to be sent into ciphertext and decrypting 
processing for decrypting ciphertext so sent back into original plaintext; comprising: 

a plurality of centers that generate secret keys pecxiliar to said entities using 
pieces of information resulting from division of information specifying each of said 
entities and that sends said secret keys to said entities, the divided information 
used to generate the secret keys allowing diminished sizes of the secret keys; and 

a plurality of entities each of which generates a common key employed 
mutually in said encryption and decryption processing when communicating with 
another entity, using a component corresponding to a divided specified information 
to each entity, contained in own secret key sent from the centers, the component 
further corresponding to one or more pieces of information specifying said another 
entity. 

9. (Currently amended) A computer readable recording medium embodied in 
a tangible phvsical object that stores a program that generates at entities involved 
in communications common keys used in processing to encrypt plaintext to 
ciphertext and in processing to decrypt said ciphertext to said plaintext in a 
cryptographic communications system, comprising: 

first program code means for causing said computer to select a component 
corresponding to one or more of divided pieces of information specifying one entity 
from a secret key pecuhar to another entity, the divided information allowing a 
diminished size of the secret key; and 

second program code means for causing said computer to generate said 
common keys using said components selected. 

10-12. (Canceled) 

13. (Previously presented) A cryptographic communications method for 
communications of information between entities wherein a plurality of centers are 
provided, each of which generates secret keys peculiar to the entities using divided 
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specifying information resulting from division of information specifying each of the 
entities into a plurahty of blocks, the divided information used to generate the 
secret keys allowing diminished sizes of the secret keys; one entity generates a first 
common key using a first component contained in secret keys peculiar to the one 
entity sent from the centers, encrypts plaintext to ciphertext using the first common 
key and sends the ciphertext to another entity, the first component corresponding to 
one or more of the divided pieces of information specifying said another entity; and 
said another entity generates a second common key identical to the first common 
key using a second component contained in secret keys peculiar to the another 
entity sent from said centers, and decrypts said ciphertext to the original plaintext 
using the second common key, the second component corresponding to one or more 
of the divided pieces of information specifying the one entity; secret keys for first 
block of divided specifying information have a multi-layer structure; and secret keys 
for remaining blocks of divided specifying information have a single-layer structure. 

14. (Previously presented) A secret key generation method for generating 
secret keys peculiar to entities using divided specifying information resulting from 
division of information specifying said entities into a plurality of blocks, the divided 
information used to generate the secret keys allowing diminished sizes of the secret 
keys, each entity generating a common key by using a component corresponding to 
the divided specifying information of another entity, wherein: 

computation formulas for generating said secret keys are as follows: 






«iHKCiiK] + 1 
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gio«g"i ^ (mod N) 
'iT^sgaf'^S, , (mod N) 

Si2=S°^~^^ ^11 ^ (mod N) 

I 
I 

I 

■^=g«r*^< >* (mod N) 

I 

; I 

I Y^=g<^r''< > (mod N) 
where 

vector Sij is a secret key corresponding to j*th divided specifying information 
for entity i (j = 1, 2, K) 

[vector lij] is j*th divided specifying information for entity i; 

vector 1 is a vector of dimension K wherein all components are 1; 

Hj is a symmetrical 2^3 x 2^] matrix made up of random numbers; 

Mj is size of j'th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

ai is a personal secret random number for entity i (where gcd (ai, X(N)) = 1 
and X ( • ) is Carmichael function); 

N is such that N = PQ (where P and Q are prime); 

Bij is a personal secret random number for entity i (where Bii + 6i2 + ... + BiK = 
X(N)); 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of specifying information for entity i (t = 
0, 1, 2, T); 

T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, 
then the expressions B = c^ and B = <A>c represent (iii) and (iv) below, respectively. 

(i) A=(aixv) 

(ii) B = (bpv) 
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(iii) biiv = cV 

(iv) bpv = aiiv*= 

15. (Previously presented) An encryption method wherein: 
secret keys peculiar to entities are generated using divided specifying 
information resulting from division of information specifying each of said entities 
into a plurahty of blocks, the divided information used to generate the secret keys 
allowing diminished sizes of the secret keys, each entity generating a common key 
by using a component corresponding to the divided specifying information of 
another entity; 

plaintext is encrypted to ciphertext at one entity using a common key 
generated using a component contained in the secret key peculiar to the one entity, 
the component corresponding to divided specifying information for another entity 
that is a destination of said ciphertext; and 

computation formulas for generating said secret keys peculiar to said entities 



are as follows: 





0 



8ii 



8i 2 




git 



(mod N) 



(mod N) 
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vector Sij is a secret key corresponding to j*th divided specifying information 
for entity i (j = 1, 2, K) 

[vector lij] is j*th divided specifying information for entity i; 

vector 1 is a vector of dimension K wherein all components are 1; 

Hj is a symmetrical x matrix made up of random numbers; 

Mj is size of j'th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

Qi is a personal secret random number for entity i 

(where gcd (ai, X(N)) - 1 and X ( • ) is Carmichael function); 

N is such that N = PQ (where P and Q are prime); 

6ij is a personal secret random number for entity i 

(where 6ii + 6i2 +... + 6iK = X (N)) ; 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of specifying information for entity i (t = 



T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, the 
expressions B = c^ and B = <A>^ represent (iii) and (iv) below, respectively. 

(i) A = (aiiv) 

(ii) B = (bi.v) 

(iii) bpv = c^pv 

(iv) bnv = apv^ 

16. (Original) The encryption method according to claim 15, wherein 
computation formulas for generating said common keys are as follows: 



0, 1, 2, T); 




I 



8t i in= Sit. [I ml] 



I 
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X2 im— S i2 [ Im2^ 

I 



T-t 

im 



iK =n ffT^t^im 



-g ti„ii+-^H^iij^ tw> (mod N) 



where 

gtim (= vector git [vector Imi]) is a component corresponding to vector Imi for 
entity m, selected from own vector git for 1st block of information specifying entity i 
(t = 0, 1, 2, .,.,T); 

xiim = vector Sii [vector Imi]; 

Xjim (= vector Sij [vector Imj]) is a component corresponding to vector Imj for 
entity m, selected from own vector Sij for j'th block of information specifying entity i 
(3 = 2, 3,...,K); 

Kim is a common key generated by one entity i for another entity m; and 
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yim is sum of (K-1) components Xjim (j = 2, 3, K), that is, yim = X2im + xsim + ... 

+ XKim. 

17. (Previously presented) A cryptographic communications method for 
communications of information between entities, wherein 

a plurality of centers are deployed, each of which generates secret keys 
peculiar to said entities using divided specifying information resulting from division 
of information specifying each of said entities into a plurahty of blocks, the divided 
information used to generate the secret keys allowing diminished sizes of the secret 
keys, and sends the secret keys to the entities respectively; 

one entity generates a first common key using a first component contained in 
secret keys peculiar to the one entity sent from the centers, encrypts plaintext to 
ciphertext using the first common key, and sends the ciphertext to said another 
entity, the first component corresponding to divided specifying information for 
another entity; 

said another entity generates a second common key identical to the first 
common key using a second component contained in secret keys peculiar to said 
another entity sent from the centers, and decrypts said ciphertext using the second 
common key, the second component corresponding to divided specifying information 
for the one entity; and 

computation formulas for generating said secret keys at said centers are as 
follows: 

s7r=aiHi[T;T] + ^ii"!" 
Si 2 = aiH2C 1 + /3 i2 1 

I 
I 

s7r= ttiHi ctT] 



SiK = aMliKl + /3 iK 1 
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gio = g"i ^ (mod N) 



Eii=e"* 1 (mod N)' 
■i7j'=g«r'^< Sjj > (mod N) 



.TTT^g^i"'^^ ^ (mod N) 

where 

vector Sij is a secret key corresponding to j*th divided specifying information 
for entity i (j = 1, 2, K) 

[vector lij] is j'th divided specifying information for entity i; 

vector 1 is a vector of dimension K wherein all components are 1; 

Hj is a symmetrical 2^^ x 2^i matrix made up of random numbers; 

Mj is size of j'th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

Qi is a personal secret random number for entity i (where gcd (oi, X(N)) = 1 
and X ( • ) is Carmichael function); 

N is such that N = PQ (where P and Q are prime); 

Bij is a personal secret random number for entity i (where Bii + 612 + ... + Bik = 
X (N)) ; 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of information specifying entity i (t = 0, 
1, 2, T); 

T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, the 
expressions B = c^ and B = <A>c represent (iii) and (iv) below, respectively. 

(i) A=(aiiy) 

(ii) B = (bpy) 

(iii) biiv = c V 

(iv) bpY = ajivc 
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18. (Original) The cryptographic communications method according to claim 
17, wherein computation formulas for generating said common keys are as follows: 

So i m"^ 8 io [ Iml3 

S 1 i S i 1 I ml ^ 
I 

I 

St im~8 it ^ml^ 
St i m~ S iT t Ifnl^ 

^2 i ^ 12 ^ Im2^ 

I 

i ' • . 

^ j| i m ^ i j ^ ^ mj -1 
t=0 tim 



im 



= g WjClfT] c^-^-^Hj^T;^ [i;^])^ (mod N) 

where 

gtim (= vector git [vector Imi]) is a component corresponding to vector Imi for 
entity m, selected from own vector git for 1st block of information specifying entity i 
(t = 0, 1,2 T); 

xum = vector sii [vector Imi]; 

Xjim (= vector Sij [vector Imj]) is a component corresponding to vector Imj for 
entity m, selected from own vector Sij for j'th block of information specifying entity i 
(i = 2, 3,...,K); 
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Kim is a common key generated by one entity i for another entity m; and 

yim is sum of (K-1) components xjim (j = 2, 3, K), that is, yim = X2im + xsim + ... 

+ XKim. 

19, (Previously presented) A common key generator provided at entities in a 
cryptographic communications system for generating a common key to be used in 
processing to encrypt plaintext to ciphertext and in processing to decrypt ciphertext 
back to plaintext, comprising: 

storage means for storing secret keys peculiar to said entities produced, 
according to computation formulas given below, for divided specifying information 
resulting from division of information specifying each of said entities into a 
plurality of blocks, the divided information used to generate the secret keys 
allowing diminished sizes of the secret keys, each entity generating a common key 
by using a component corresponding to the divided specifying information of 
another entity; 

selection means for selecting components corresponding to divided specifying 
information for opposite entities to be communicated with, from the secret keys 
stored; and 

means for generating said common keys, according to computation formulas 
given below, using said components so selected: 



S7r=ajH,C~nT] +fli,.T 

I 

I ^ ^ ^ 

Snr=a|HKCljK] +/3iKT 
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!"i77=g«r''^ (mod N) 

j ^ 

"iTT^e^i"'^ 1 (mod N) 

► 2 

"i7r=g"»~'^^ i ^ (mod N) 

I 

■i7f=g«r'^< S|i.>' (mod N) 

l"i7:J^=gar'^< > (mod N) 
where 

vector Sij is a secret key corresponding to j*th divided specifying information 
for entity i (j = 1> 2, K) 

[vector lij] is j'th divided specifying information for entity i; 

vector 1 is a vector of dimension K wherein all components are 1; 

Hj is a symmetrical 2^^ x matrix made up of random numbers; 

Mj is size of j'th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

ai is a personal secret random number for entity i (where gcd (ai, X(N)) = 1 
and X ( • ) is Carmichael function); 

N is such that N = PQ (where P and Q are prime); 

Bij is a personal secret random number for entity i (where Bii + 6i2 + ... + Bik = 
X(N)); 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of information specifying entity i (t = 0, 
1, 2, T); 

T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, the 
expressions B = c^ and B = <A>c represent (iii) and (iv) below, respectively. 

(i) A = M 

(ii) B = (bjav) 

(iii) bjiv = cv 

(iv) bpv = a^iv^ 
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^1 im S i 1 [ I^j] 
I 

St i S iT C I^ii] 
^2 i m= S i2 t 1,^2^ 

= g«if^^^--H^T;^C])^ (mod N) 

where 

gtim (= vector git [vector Imi]) is a component corresponding to vector Imi for 
entity m, selected from own vector git for 1st block of information specifying entity i 
(t = 0,l,2,...,T); 

xum = vector su [vector Imi]; 

Xjim (= vector Sij [vector Imj]) is a component corresponding to vector Imj for 
entity m, selected from own vector Sij for j'th block of information specifying entity i 
(j = 2, 3, K); 
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Kim is a common key generated by one entity i for another entity m; and 

yim is sum of (K-1) components xjim (j = 2, 3, K), that is, yim = X2im + xsim + ... 

+ XKim. 

20. (Previously presented) A cryptographic communications system for 
reciprocally performing, between a plurahty of entities, encryption processing for 
encrypting plaintext that is information to be sent into ciphertext and decryption 
processing for decrypting ciphertext so sent back into original plaintext, comprising: 

a plurahty of centers each of which generates secret keys peculiar to said 
entities, according to computation formulas given below, using divided specifying 
information resulting from division of information specifying each of said entities 
into a plurahty of blocks, the divided information used to generate the secret keys 
allowing diminished sizes of the secret keys, and sends said secret keys to said 
entities; and 

a plurality of entities each of which generates a common key mutually 
employed in said encryption and decryption processing when communicating with 
another entity, according to computation formxdas given below, using a component 
contained in own secret key sent from said centers, the component corresponding to 
divided specifying information for said another entity: 





N) 



N) 



N) 
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where 

vector Sij is a secret key corresponding to j*th divided specifying information 
for entity i (j = 1, 2, K) 

[vector lij] is j'th divided specifying information for entity i; 

vector 1 is a vector of dimension K wherein all components are 1; 

Hj is a symmetrical 2^i x 2^^ matrix made up of random numbers; 

Mj is size of j*th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

Qi is a personal secret random number for entity i (where gcd (ai, X(N)) = 1 
and X ( • ) is Carmichael function); 

N is such that N = PQ (where P and Q are prime); 

6ij is a personal secret random number for entity i (where 6ii + 612 + ... + Bik = 
A(N)); 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of information specifying entity i (t = 0, 
1,2,...,T); 

T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, the 
expressions B = c^ and B = <A>^ represent (iii) and (iv) below, respectively. 

(i) A = ( apv) 

(ii) B = (bpv) 

(iii) biiv= cV 

(iv) bpv = aiiv'^ 
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g0im=8 iO Clml^ 
8i im~8 il ^ ^n\\} 

Sr ifn^ S iT t Ifni] 

I 
I 

^ ^ i m ^ i i ^ m j ^ 

'"^ t=0 tim 

— K J t=0" 1 im im . 

T 

= g "7 ^« i « i"^^ "ilS -^-^Hk"!^^ "I!^^ ^ -"^ i"^ 

= g « ,cT^ ^•^HK^'iJi^ "iric^ (m o d N) 
where 

gtim (= vector git [vector Imi]) is a component corresponding to vector Imi for 
entity m, selected from own vector git for 1st block of information specifying entity i 
(t = 0, 1,2,....T); 

= vector Sii [vector Imi]; 
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Xjim (= vector Sij [vector Imj]) is a component corresponding to vector Imj for 
entity m, selected from own vector Sij for j*th block of information specifying entity i 
(j = 2, 3,...,K); 

Kim is a common key generated by one entity i for another entity m; and 

yim is sum of (K-1) components Xjim G - 2, 3, K), that is, yim = X2im + xsim + ... 

+ XKim. 

21, (Currently amended) A computer readable recording medium embodied in 
a tangible phvsical object for storing a program that generates at entities involved 
in communications a common key mutually used in processing to encrypt plaintext 
to ciphertext and in processing to decrypt said ciphertext back to said plaintext in a 
cryptographic communications system, comprising: 

first program code means for causing said computer to select a component 
corresponding to divided specifying information of one entity that is a ciphertext 
recipient fi:om a secret key pecuhar to another entity that is a ciphertext sender, 
according to computation formulas given below, for each of divided specifying 
information resulting from division of information specifying each of said entities 
into a plurality of blocks, the divided information allowing a diminished size of the 
secret key; and 

second program code means for causing said computer to generate said 
common key, according to computation formulas given below, using said 
components selected: 

■S7r= aiH, CTtl + ^nT 
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"iT^sg^r 1 (mod N) 
iTT^g"'"'^^ (mod N) 



I Y^=s^i''< S|i > (mod N) 

I : . ■ 

iT^^-g^r''^ Sii > (mod N) 
where 

vector Sij is a secret key corresponding to j'th divided specifying information 
for entity i (j = 1, 2, K) 

[vector lij] is j*th divided specifying information for entity i; 

vector 1 is a vector of dimension K wherein all components are 1; 

Hj is a symmetrical x matrix made up of random numbers; 

Mj is size of j*th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

Qi is a personal secret random number for entity i (where gcd (ai, X(N)) = 1 
and X ( • ) is Carmichael function); 

N is such that N = PQ (where P and Q are prime); 

Bij is a personal secret random number for entity i (where Bii + Bi2 + ... + Bik = 
X(N)); 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of information specifying entity i (t = 0, 
1,2,...,T); 

T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, the 
expressions B = c^ and B = <A>^ represent (iii) and (iv) below, respectively. 

(i) A = (ayv) 

(ii) B = (bi.v) 
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(iii) bpv = cV 

(iv) bnv = a^v*^ 

So im~8 io t Iml^ 
8i I m" 8 ii [ Iml^ 

8t i 8 iT ^ ml 
I 

^ j i m ^ i j I- ^ mi -1 



i m~~ S iK [ ImK^ 

T c y*^"^^ 



t=0 tim 
T 



— S I i^QT I im itn 
T 

T 

= g Wi^'^r^ tiiS-^-^H^'^J] CW])"^ (mod N) 
where 

gtim (= vector git [vector Imi]) is a component corresponding to vector Imi for 
entity m, selected from own vector git for 1st block of information specifying entity i 
(t = 0,1,2 T); 

xum = vector Sii [vector Imi]; 

Xjim (= vector Sij [vector Imj]) is a component corresponding to vector Imj for 
entity m, selected from own vector Sij for j'th block of information specifying- entity i 
(j = 2,3....,K); 
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Kim is a common key generated by one entity i for another entity m; and 

yim is sum of (K-1) components Xjim (j = 2, 3, K), that is, yim = X2im + xaim + ... 

+ XKim. 

22. (Currently amended) A computer data signal readable program embodied 
in a carrier wave tangible physical object for generating at entities involved in 
communications common keys used in processing to encr5T)t plaintext to ciphertext 
and in processing to decrypt said ciphertext to said plaintext in a cryptographic 
communications system, comprising: 

first code segment for causing a computer to select a component 
corresponding to one or more of divided pieces of information specifying one entity 
from a secret key peculiar to another entity, the divided information allowing a 
diminished size of the secret key; and 

second code segment for causing said computer to generate said common keys 
using said components selected, wherein said computer generates said common 
keys by using a component corresponding to the divided specifying information of 
another computer. 

23. (Currently amended) A computer data oignal readable program embodied 
in a carrier wave tangible physical object for generating at entities involved in 
communications a common key mutually used in processing to encrypt plaintext to 
ciphertext and in processing to decrypt said ciphertext back to said plaintext in a 
cryptographic communications system, comprising: 

first code segment for causing a computer to select a component 
corresponding to divided specifying information of one entity that is a ciphertext 
recipient from a secret key peculiar to another entity that is a ciphertext sender, 
according to computation formulas given below, for each of divided specifying 
information resulting from division of information specifying each of said entities 
into a pluraUty of blocks, the divided information allowing a diminished size of the 
secret key; and 
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second code segment for causing said computer to generate said common key, 
according to computation formulas given below, wherein said computer generates 
said common keys by using a component corresponding to the divided specifying 
information of another computer, using said components selected: 

s7T=«iHiCTTr] +flnT 

I 
I 

Y7o = S^'' (mod N) 

► 2 

"iTt^g'^'"^^ ^'i ^ (mod N) 



"i^=g«r'^<Sii > (mod N) 
where 

vector Sij is a secret key corresponding to j'th divided specifying information 
for entity i (j = 1, 2, K) 

[vector lij] is j'th divided specifying information for entity i; 

vector 1 is a vector of dimension K wherein all components are 1; 

Hj is a symmetrical 2^^ x matrix made up of random numbers; 

Mj is size of j'th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

Qi is a personal secret random number for entity i (where gcd (ai, X(N)) = 1 
and X ( • ) is Carmichael function); 

N is such that N = PQ (where P and Q are prime); 
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6ij is a personal secret random number for entity i (where Bii + Bi2 + ... + Bik = 
X(N)); 

g is maximum generating element with modvdo N; 

vector git is a secret key for 1st block of information specifying entity i (t = 0, 
1,2,...,T); 

T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, the 
expressions B = c^ and B = <A>^ represent (iii) and (iv) below, respectively. 

(i) A=(anv) 

(ii) B = (bi,v) 

(iii) bnv = cV 

(iv) bnv = apv*^ 

Si i 8 i I t Iml^ 

S t i m"" S i t C I(nl ^ 
I 

St i S iT t Ifni] 
I 

t=0 t im 



T-t 
m 



T 
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«,cT;T3 0--H^T;t3 (C^y'' (mod N) 
where 

gtim (= vector git [vector Imi]) is a component corresponding to vector Imi for 
entity m, selected from own vector git for 1st block of information specifying entity i 
(t = 0, 1, 2, T); 

xum = vector Sii [vector Imi]; 

Xjim (= vector Sij [vector Imj]) is a component corresponding to vector Imj for 
entity m, selected from own vector Sij for j*th block of information specifying entity i 
(j-2,3,...,K); 

Kim is a common key generated by one entity i for another entity m; and 

yim is sum of (K-1) components Xjim Q = 2,3, K), that is, yim = X2im + X3im + ... 

+ XKim. 
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